Raydium $1.34M Exploit: Impact on Solana DEX User
Published 6/11/2026, 10:45:29 PM
Incident Summary
On June 10, 2026, Raydium suffered a security breach draining approximately $1.34 million from five legacy liquidity pools in its deprecated AMM V3 program. The attack exploited a flaw in LP mint validation—attackers created a fraudulent LP mint with a supply of just one unit, bypassing the program's proportion checks governing withdrawals. These pools had been inaccessible through the UI and SDK since 2021 but remained live on-chain with real assets.
| Asset | Amount | Approximate Value |
|---|---|---|
| USDC | 893,700 | ~$900,000 |
| SOL | 5,603 | ~$357,000 |
| RAY | 150,177 | ~$86,000 |
Market Reaction (c2: UNRESOLVED — partial data available)
Token Price Impact
| Asset | 24-Hour Change | Approximate Price |
|---|---|---|
| RAY | Down <1% | ~$0.57 |
| SOL | Down ~2% | ~$63.88 |
The market reaction was notably muted. RAY actually traded up 2%+ intraday following the incident, suggesting confidence in treasury-backed compensation and recognition that the vulnerability was isolated to legacy code.
Protocol Metrics
| Metric | Value |
|---|---|
| Current TVL | ~$797 million |
| Exploit as % of TVL | <0.2% |
| 7-Day DEX Volume | >$1.1 billion |
| 30-Day Fee Revenue | ~$5.15 million |
Gap: Pre/post exploit volume comparisons for Solana DEXs are missing. The current 7-day volume of >$1.1B is not contextualized against a pre-incident baseline to demonstrate whether activity changed measurably.
Sources: tradingview.com, crypto.news, solana.foundation, beincrypto.com
User Confidence (c3: UNRESOLVED — no direct metrics)
Supporting factors for confidence:
- Treasury pledged full compensation for all affected assets
- No current users were affected—active positions on V4, V5, and CLMM pools remain intact
- Transparent public disclosure via official channels
- Historical precedent: the December 2022 exploit (~$4.4M via private key compromise) resulted in 100% compensation for RAY pool LPs and 90% + 20% RAY bonus for non-RAY pool LPs
Risk factors:
- Second major exploit in ~3.5 years suggests a repeat pattern
- Legacy code remained exploitable years after UI deprecation
- Attacker laundered ~810 ETH via Tornado Cash, complicating recovery
Gap: Direct user confidence metrics (user activity changes, withdrawal patterns, new signups, social sentiment scores, or wallet behavior data) are not provided. Price-based indicators (RAY down <1%, SOL down ~2%) are suggestive but do not measure actual user behavior changes.
Comparative Context (c4: UNRESOLVED — limited data)
The 2022 Raydium exploit (~$4.4M) involved a private key compromise via trojan malware. Compensation outcomes were favorable for users, which may provide precedent for the current incident. Solana's security infrastructure has since been enhanced with programs like STRIDE and the SIRN (Solana Incident Response Network).
Gap: Broader comparative data from other DEX exploits beyond Raydium is limited. Quantitative comparison of compensation outcomes across similar incidents is not provided. User confidence survey data or wallet activity metrics post-incident are unavailable.
Assessment
The exploit's short-term impact on Solana DEX user confidence appears limited for current users:
- Scale: At <0.2% of TVL, the exploit represents a small fraction of protocol resources, and affected pools had been deprecated for years.
- Containment: No active pools or current users were affected. The vulnerability was specific to legacy code, not a systemic key compromise.
- Responsiveness: Treasury-backed compensation and transparent communication mirror the successful 2022 recovery, suggesting affected users will likely be made whole.
- Market resilience: Minimal price disruption indicates the broader market absorbed the news without panic.
However, the incident underscores a persistent risk: unmaintained contracts remain on-chain targets years after retirement. Users should monitor official Raydium channels for security updates and consider using Revoke.cash for unused approvals.
Next Steps
- Monitor on-chain activity — Track wallet behavior on Raydium's active pools for signs of withdrawal pressure or reduced LP participation using the on-chain data tools.
- Set up scheduled briefings — Automate daily Solana DEX volume and sentiment checks to detect if user confidence shifts in the coming weeks.